RE: Oracle and SqlNet behind a firewall

From: <Dan.Hubler_at_midata.com>
Date: Fri, 21 Jul 2000 11:35:35 -0500
Message-Id: <10565.112660@fatcity.com>

Dedicated.

What would be the concern?

Tom Tyson <tomtysonjr_at_yahoo.com>@fatcity.com on 07/21/2000 09:33:49 AM

Please respond to ORACLE-L_at_fatcity.com

Sent by: root_at_fatcity.com

Sent From the mail file of: Dan Hubler

To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc:

Subject: RE: Oracle and SqlNet behind a firewall

Dan

Are using dedicated server connections, or shared (ie MTS)?

Tom Tyson

• "VanderMey, Bob" <BVanderMey_at_OrderZone.com> wrote:
  > Dan,
  >
  > Our security guys complained about the same thing. When I looked int=
  o it, I
  > couldn't figure out how to limit the outbound ports. The problem is =
  that
  > the listener uses port 1521 (or another of your choice) but then hand=
  s off
  > to the database. The database then picks a port to use when talking =
  to the
  > client. The best I could come up with at the time, wasz to have the
  > security guys see which ports were being used (they all stay within a=
  

> certain range) and then open up a range of ports somewhat lower and
higher
> than those being used.
>
> If you do figure this out, please let me know what you did.
>
> Bob VanderMey
> Oracle DBA
> OrderZone.com, Inc.
> 847 573-2687
> bvandermey_at_orderzone.com
> 565 Lakeview Parkway, Suite 250
> Vernon Hills, IL 60061
> http://www.orderzone.com
>
>
> -----Original Message-----
> Sent: Thursday, July 20, 2000 4:08 PM
> To: Multiple recipients of list ORACLE-L
>
>
>
> Just put our first NT server with Oracle 8.0.5 and Net8 behind a
firewall.
>
> The security guys are complaining because all the inbound traffic goe=
s in
> through port #1521, but the outbound traffic is using multiple and ra=
ndom
> ports.
> They don't like this.
>
> Anybody know anything about this?
>
>
>
> --
> Author:
> INET: Dan.Hubler_at_midata.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing List=
s
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
> --
> Author: VanderMey, Bob
> INET: BVanderMey_at_OrderZone.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing List=
s
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

---

Do You Yahoo!?
Get Yahoo! Mail ? Free email you can access from anywhere! http://mail.yahoo.com/

--
Author: Tom Tyson
  INET: tomtysonjr_at_yahoo.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may

Received on Fri Jul 21 2000 - 11:35:35 CDT